Question 1

Which option correctly describes the authentication differences between CyberArk Privilege Cloud andCyberArk PAM Self-Hosted?

Options :

A : CyberArk Privilege Cloud only provides a username and password authentication without third-partyIdP integration; CyberArk PAM Self-Hosted uses traditional on-premises methods such as Windowsand LDAP. but lacks modern protocols such as SAML or OIDC.

B : CyberArk Privilege Cloud uses cloud-based methods, integrating with CyberArk Identity for MFA. andsupports SAML and OIDC; CyberArk PAM Self-Hosted depends on on-premises methods such asRADIUS and LDAP, but can adopt SAML or OIDC with additional setups.

C : CyberArk Privilege Cloud requires on-premises components for all authentication and does not supportother cloud-based authentication protocols; CyberArk PAM Self-Hosted offers a wide array ofmethods, including support for SAML. OIDC. and other modern protocols, without needing onpremises components.

D : Both use the same authentication methods.

Answer: B

Question 2

What is the default username for the PSM for SSH maintenance user?

Options :

A : proxymng

B : psmp_maintenance

C : psmpmaintenanceuser

D : proxyusr

Answer: A

Question 3

What is the correct CyberArk user to use when installing the Privilege Cloud Connector software?

Options :

A :

B : Administrator

C :

D : Installer

Answer: A

Question 4

You plan to install the Privilege Cloud Connector on Windows Server 2019 and must leverage your existingRDS Per-user licenses for PSM connections. What must you do?

Options :

A : Add the UseRDSPerUser=Yes line to the basic_psm.ini parameters file.

B : Install the RDS License Server Service on Windows 2016.

C : Migrate the local PSMConnect users to Domain users.

D : Modify the UseRDSPerUser parameter to Yes on every Windows-related platform.

Answer: C

Question 5

Which ports do the CyberArk Identity Connector require to be opened to support using Active Directory forLDAP authentication to Privileged Cloud Shared Services? (Choose two.)

Options :

A : TCP 636 from the connector host to the domain controller

B : TCP 443 from the connector host to the CyberArk Tenant

C : TCP 636 from the CyberArk Tenant to the domain controller

D : TCP 443 from the CyberArk Tenant to the connector host

E : TCP 636 from the domain controller to the CyberArk Tenant

Answer: A,B